Privacy policy
This GDPR and Slovak Act No. 18/2018 Coll. notice explains how the operator (a natural person) processes personal data on the free NajGastro.sk project.
Last updated: 15 June 2026
Controller and contact
The natural person operating the website https://www.najgastro.sk (location: Slovensko). Contact: info@najgastro.sk. NajGastro.sk is currently a non-commercial, free project — we do not sell goods or services, subscriptions, or paid listings. For privacy inquiries contact info@najgastro.sk. To exercise your rights, email from your registered address or provide verifiable identification.
Personal data we process
Account: email, name (optional), profile photo (optional), password hash at the auth provider. Reviews: text, rating, date, link to account. Businesses: contact and operational data, address, GPS, photos, opening hours. Technical data: IP address, browser type, essential cookies, security logs. Newsletter: email and consent. Aggregated business profile view statistics.
Purposes and legal bases
Providing the free service (account, business profile, reviews) — Art. 6(1)(b) GDPR. Legitimate interests (security, abuse prevention, aggregated visit statistics, handling reports) — Art. 6(1)(f) GDPR. Consent (newsletter, optional cookies) — Art. 6(1)(a) GDPR; you may withdraw consent at any time. We do not use data for paid marketing or selling contact lists.
Retention
Account and business profile: for the life of the account plus up to 3 years unless longer retention is required (disputes, legal claims). Reviews: while the business profile is public; may be anonymized after account deletion. Newsletter: until consent is withdrawn. Technical logs: typically 90 days.
Recipients and processors
Trusted processors may include hosting/database (Supabase), email (Resend), map tiles (OpenStreetMap), and analytics tools. We use GDPR Art. 28 processing agreements. We do not sell personal data for marketing.
Transfers outside the EEA
Some providers may process data outside the EU/EEA. We use appropriate safeguards (EU Standard Contractual Clauses or adequacy decisions). Details available on request.
Your rights
You have the right of access, rectification, erasure, restriction, portability (where applicable), objection to legitimate-interest processing, and withdrawal of consent. Contact info@najgastro.sk; we respond within 30 days.
Supervisory authority
You may lodge a complaint with Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, https://dataprotection.gov.sk. We recommend contacting us first so we can resolve the issue directly.
Security and changes
We apply appropriate technical and organizational measures (encryption in transit, access controls, updates). We may update this policy; material changes will be published here with an effective date.